AdamBMark
I'm new to my position at my company, especially to some of the server-level stuff I need to cover. Our OpenVPN setup was chugging along fine until earlier this week. No one could access and trying to access the /admin page just gave an error. I forced a re-run of the setup program, it kept most of my previously set defaults. That may have not been the best idea, I admit. After re-installing my SSL certificates, it all looked good except for LDAP. I know what LDAP is, I've just never had to use it this way before.
I can't quite figure out the configuration for the Bind DN and Base DN. I have a user on my (Mac OS X 10.8) server called "vpnuser" just for this purpose. I see a number of examples, but I can't translate them to the real-life usage that I need.
I've tried a number of variations. For my example, let's say that my server is named "file.myserver.com". It looks to me that I should put:
cn="vpnuser",dc="myserver",dc="com"
in Bind DN, the user's password in the password field
and
cn="users",dc="myserver",dc="com"
in the Base DN field. I'm using uid for the attribute, since we're not using Active Directory. But it doesn't work after doing all the saving and updating. I don't know if I need to put anything in to the Additional LDAP Req. field.
If anyone could give me a bit of guidance, it would be greatly appreciated. While I'll do it in the future, I don't have the time to learn all of LDAP's intricacies just yet. Thanks!
AdamBMark
I'm not 100% sure I know what you mean by "Access Server". Both the OpenVPN Ubuntu box and the Mac mini we user for the main file server (Server 2.2 on Mac OS X 10.8) are in my server room. The OpenVPN box is CLI only, I can log in to in from my desktop Mac. I can access the Mac mini via Apple Remote Desktop or with a KVM in the server room.
The OS X server is pretty straight-forward. OS X 10.8.5 with Server 2.2 on a server edition mini, quad-core 2.0GHz i7, 8GB RAM, pair of 500GB internal hard drives. About 70 users in total. It was all getting along fine until there was some sort of breakdown where no user could log in to the page or use the menu bar item to connect. (All my users except 2-3 are on Macs.) My attempts to go to the /admin page just led to my browser hanging and the page not loading. That's when I read up on the installation procedure and forced a re-run of the set up program. I was able to recover and reinstall the SSL certificates, but the LDAP query is my only stumbling block to restoring OpenVPN to it's previous configuration.
For the moment, I've built accounts for the thirty or so possible users and gone to that method of authorization for access, but my boss wants the old method restored. As do I.
